DDOS identification method and device, electronic equipment and medium

The invention discloses a DDOS identification method and device, electronic equipment and a medium, which are used for solving the problem of low accuracy of DDOS attack identification in the prior art. The method comprises the following steps: acquiring a to-be-detected data stream; determining a first feature value of the to-be-detected data stream corresponding to each target feature accordingto pre-stored target static features and target relative features for identifying the DDOS attack; inputting each determined first feature value into a pre-trained detection model, and determining whether the to-be-detected data stream is the DDOS attack or not. 本发明公开了一种DDOS识别方法、装置、电子设备及介质，用以解决现有技术中识别DDOS攻击的准确率不高的问题，该方法包括：获取待检测数据流；根据预先保存的识别DDOS攻击的目标静态特征和目标相对特征，确定所述待检测数据流对应每个目标特征的第一特征值；将确定的每个第一特征值输入到预先训练完成的检测模型中，确定所述待检测数据流是否为DDOS攻击。